Re: White text on white background
Bug with patches to fix this:
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6760
On 02/17, dar...@chaosreigns.com wrote:
Looks like this fixes it:
$ diff ./lib/Mail/SpamAssassin/HTML.pm
/usr/share/perl5/Mail/SpamAssassin/HTML.pm
952a953,956
# Handle 3 character color shorthand.
if (length($color) == 3) {
$color =~ s/(.)(.)(.)/$1$1$2$2$3$3/;
}
Opening a bug to apply it.
On 02/17, dar...@chaosreigns.com wrote:
Confirmed. #999 is getting converted to #090909, when it should be
getting converted to #99. (Threw a print statement into the top
of html_font_invisible().)
On 02/17, dar...@chaosreigns.com wrote:
You should open a bug. SpamAssassin attempts to catch these via
html_font_invisible() in HTML.pm (should hit rule HTML_FONT_LOW_CONTRAST).
My guess is that it's failing to handle the short form of color values
(FFF instead of FF). Looks like they should be converted like 123
- 112233.
Report bugs here: https://issues.apache.org/SpamAssassin/
On 02/16, JP Kelly wrote:
I am getting a bunch of spam with white text on a white background. Any
ideas how to catch it?
Here is an example:
body bgcolor=#FF leftmargin=0 topmargin=0 marginwidth=0
marginheight=0
p style=color:#FFF; font-size:1px; width:600px;
--
Life is either a daring adventure or it is nothing at all.
- Helen Keller
http://www.ChaosReigns.com
--
It is the first responsibility of every citizen to question authority.
- Benjamin Franklin
http://www.ChaosReigns.com
--
I don't want to die... just yet... not while there's... women.
- J. Matthew Root, 8/23/02 (http://www.jmrart.com/)
http://www.ChaosReigns.com
--
Force, my friends, is violence; the supreme authority
from which all other authority is derived.
- Michael Ironside, Starship Troopers
http://www.ChaosReigns.com
Spam messages with no payload
I'm convinced that spammers are using me as a guinea pig. I'm getting hit pretty hard by just a few determined spammers at the moment who seem to vary their spam signature every day or so (they sent out through thousands of free accounts at free email providers, so can't use client DNSBL). But every now and again, I'll get a spam from them that follows pretty much the same pattern as everything else, except that the vital ingredient - the link to their spam site or any mention of what they are promoting - is not there. Just the formatting and the random words. And these mails get right through my spam filter. It's as if they are just sending out a test run when they come up with a new pattern, to see if it increases their bounce rate or something. BAYES_99 often hits on them, but I don't want to reject email just because it hits BAYES_99. The thing is, it's difficult to classify these emails even manually as spam or not spam, so it'd be hard to come up with rules to filter them. They are once-off, so they're not bulk per se - and they are not promoting the spammer - they are just random words. But they are, of course, still spam to me because they are noise I didn't request. -- View this message in context: http://old.nabble.com/Spam-messages-with-no-payload-tp33350242p33350242.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Spam messages with no payload
Can you pastebin some sample messages + headers ? -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net http://www.fluxlabs.net/ Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On 2/18/12 6:55 PM, neon_overload neon...@neonjs.com wrote: I'm convinced that spammers are using me as a guinea pig. I'm getting hit pretty hard by just a few determined spammers at the moment who seem to vary their spam signature every day or so (they sent out through thousands of free accounts at free email providers, so can't use client DNSBL). But every now and again, I'll get a spam from them that follows pretty much the same pattern as everything else, except that the vital ingredient - the link to their spam site or any mention of what they are promoting - is not there. Just the formatting and the random words. And these mails get right through my spam filter. It's as if they are just sending out a test run when they come up with a new pattern, to see if it increases their bounce rate or something. BAYES_99 often hits on them, but I don't want to reject email just because it hits BAYES_99. The thing is, it's difficult to classify these emails even manually as spam or not spam, so it'd be hard to come up with rules to filter them. They are once-off, so they're not bulk per se - and they are not promoting the spammer - they are just random words. But they are, of course, still spam to me because they are noise I didn't request. -- View this message in context: http://old.nabble.com/Spam-messages-with-no-payload-tp33350242p33350242.ht ml Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Spam messages with no payload
Here is one example from this morning http://pastebin.com/xxJut9wb And after decoding that base64 attachment: http://pastebin.com/BApWfSfd Normally, there is a link or redirect to the spammer's site but this is one of the ones that is missing that, it has all the same formatting and the filler text but no payload so it is a pointless spam (unless there is some other reason for it, like testing bounce rates). -- View this message in context: http://old.nabble.com/Spam-messages-with-no-payload-tp33350242p33350641.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Spam messages with no payload
Den 2012-02-19 06:14, neon_overload skrev: http://pastebin.com/xxJut9wb http://pastebin.com/BApWfSfd invalid messageid and html attachment when there exists html body
Re: Spam messages with no payload
Benny Pedersen wrote: invalid messageid and html attachment when there exists html body Thanks for looking at that for me. Forgive me since I am relatively new to Spamassasin, but why wouldn't it have built-in rules for this, or are there rules that are just disabled by default? It seems it would be easy to do a header rule for the message-id and to do a meta rule for an HTML body plus an HTML attachment. Feel free to point me in the right direction. Cheers, Thomas Rutter -- View this message in context: http://old.nabble.com/Spam-messages-with-no-payload-tp33350242p33350779.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
